Recommended sanitization method to allow partial HTML code for user textarea input in Velocity form

Hello,

I am trying to create a form where the user sets the firstname, the lastname and eventually personal website link or email address alias to personalize a signature.
The draft is currently using Velocity to render the form and to switch to another view so the user can preview the signature and download it.

My issue is that I cannot figure out how to clean the textarea input where some HTML code should partially be supported (only specific tags such as ‘b’ and ‘i’).
The ‘Security’ page of the documentation suggests $escapetool.xml but this method is also breaking the basic tags that would be considered as safe in the signature.

Would it be possible to achieve this with the HTML Cleaner from XML Module?
If so, what would be the minimal working example to follow?
I tried to adapt the example to add it into the Velocity code, but without success so far.

I am new to XWiki and I apologize if this is a trivial question.
Anyway, I would be very pleased if anyone could provide me some hints.

Regards